In
CIA Leak Trial of Schulte FBI Agent Cites
Petabyte of Info & Brutal Kangaroo
Cyber Tool
By Matthew
Russell Lee, Patreon Thread Song
BBC
- Decrypt
- LightRead - Honduras
- Pod
SDNY COURTHOUSE,
June 14 – When jury selection
was completed for the retrial
of accused CIA Vault 7 leaker
Joshua Schulte, U.S. District
Court for the Southern
District of New York Judge
Jesse M. Furman told the
jurors, Do not read or say
anything about the case. Inner
City Press was there, and live
tweeted here.
Judge Furman: I'm
going to announce the selected
jurors. [He reads out 16
names. Inner City Press took
fast notes - on on Patreon here]
Inner City
Press has filed opposing
the sealing of
the courtroom
for CIA
witnesses, and
once the
witnesses
begin
anticipates
making other
filings.
The June 14, 2022
opening arguments, as live
tweeted by Inner City Press, here:
AUSA Denton:
Joshua Schulte is responsible
for the largest leak in CIA
history, and put officers at
risk. When confronted, he
lied.
AUSA
Denton: He stole custom-built
software used to track
terorrists. Those filed were
posted on Wikileaks. It was
devastating. Operations came
to a crashing halt. Allies
wondered if their info could
be leaked. The FBI sprang into
action
AUSA
Denton: They found his man's
crimes. He hacked and leaked
cyber tools. Joshua Schulte
was one of the CIA's own. He
built the tools. He violated
his oath to protect the US,
and he violated the law. Why
did he do it? Out of spite.
AUSA
Denton: He felt the CIA had
disrespected him. He wanted
payback. His vendetta
continued in jail. He got a
cellphone in jail and leaked
again, plotted a campaign. He
committed espionage, computer
hacking, and he lied to the
FBI. My name is David Denton.
AUSA Denton: Joshua Schulte
built sophisticated cyber
tools, in a secret building
with armed guards. Those there
were vetted, that they could
be trusted.
AUSA
Denton: Schulte was made a
software administrator with
super-access. He made
back-ups... He falsely accused
his co-worker of making a
death threat. But the CIA
found it was not true. Schulte
got angry and acted. The CIA
locked it down, changed the
codes
AUSA
Denton: But the CIA did not
change one particular key. And
Schulte used it. He heard it
too would be changed. That was
the day he stole the info that
Wikileaks posted. He used a
snap shot, or reversion,
before it was locked down.
AUSA Denton: He
spent an hour inside the
snapshot. He used his powers
and copied the entire CIA
cyber arsenal. He stole a
complete copy - same as was
published on Wikileaks. He
unwound his reversion. Schulte
started deleting log files.
But he couldn't get them all
AUSA Denton: He
downloaded software to hide
his identity. He researched
how to transfer, and how to
destroy digital evidence at
home. He tried to wipe his
home computer clean - he
followed the exact
instructions of Wikileaks. He
took a job in NY [at
Bloomberg]
AUSA Denton:
After Wikileaks published,
Schulte lied to the FBI. Then,
in jail, he used a secret
phone to create accounts on
social media. In jail
notebooks he wrote, I will
stage my information war
AUSA Denton:
After Wikileaks published,
Schulte lied to the FBI. Then,
in jail, he used a secret
phone to create accounts on
social media. In jail
notebooks he wrote, I will
stage my information war
AUSA
Denton: Ladies and gentlemen,
you'll see how the agents
identified Schulte and his
back up version. Forensic
experts will show you what he
did. His digital fingerprints
were all over it. They found
the trail.
AUSA Denton:
You'll hear from Schulte's
co-workers, covert operatives
at the CIA AUSA Denton:
Schulte got the nickname
"Nuclear Option." His mounting
anger at the CIA, the agency
tried to address it. You'll
see the log files. You'll
watch Defendant declare on
video he wanted his
supervisors to be punished.
You'll see him in jail on the
phone
AUSA Denton: He
wrote that he would break of
all diplomatic relations... At
the end of the trial we'll
talk to you again. For now, do
three things. First, pay close
attention. 2d, follow Judge
Furman's instructions. 3d, Use
your common sense - AUSA
Denton: This man is guilty.
Thank you.
Judge Furman:
Now, defendant's opening
statement.
Schulte:
The evidence does not fit.
There is no information war. I
did not commit these crimes.
Good afternoon. My name is
Josh Schulte. I was born in
1988 in Texas.
Schulte: I worked
at IBM. Then I wanted to serve
my country. I was 12 yrs old
on September 11, 2001. I
applied to NSA and CIA after
one semester. After successful
background checks I was hired
in 2010. I assisted on a case
to verify the location of
Osama Bin Laden
Schulte: I then
worked at Bloomberg LLP. I was
there when Wikileaks
published. It was embarrassing
for the CIA. They did not know
when it was taken, how much or
who. They still don't know.
DEVLAN was so insecure it was
nicknamed the Wild Wild West
Schulte:
The evidence will show that an
individual, after Snowden's
leaks, said it could happen to
DEVLAN. It was impossible to
find the leaker. They could
not admit it. To save face,
they had to blame someone.
They selected me as the patsy.
Schulte:
The CIA told the FBI to go
after me. This was a political
witch hunt from day one. The
government is manipulating the
data. If you miss a day at
work, they say you were
committing a crime. It's spin
and manipulation.
Schulte:
This is the government's
twilight zone. There were
innocent explanations for
everything. The first aspect
of the government's fantasy is
my motive. By 2016, sure life
had given me lemons. But I
made lemonade.
Schulte: They say
I was driven to insanity. I
stood up for myself. When I
lost, I moved on with my life.
Why Wikileaks? Why not just on
the Internet to expose
everything. Wikileaks only
published a small segment of
it.
Schulte:
This does not jibe with my
loyal personality and
patriotism. The government
says I broke the rules of the
CIA. But there were no rules
on DEVLAN. But it was just a
co-worker, using his access to
power. They try to conflate
servers and permissions.
Schulte: In
reality, the back door was the
front door. I would not have
had to go back in time. It was
all unsecure. They say the
March 3, 2016 version was
taken for emotional reasons.
The computer I used at CIA was
preserved. I could have wiped
it.
Schulte:
Their evidence proves my
innocence. They have the logs.
Not one was deleted. The
commands were not executed.
But they plan to convict me
regardless of my innocence.
Someone stole their crown
jewels. It's not a good look
for the CIA.
Schulte: My CIA
work station shows I only
connected to one drive and
connected it to a
write-blocker. My computer did
not have the space to store
the back ups. That's
reasonable doubt. My CIA work
station proves my innocence.
Then they seized all my home
computers
Schulte: I
had huge servers. These are my
habits and hobbies. I stayed
up late. I was playing an
online game. The evidence will
prove my innocence. They will
wave a back up file in your
face. They don't know which
one was stolen.
Schulte:
The government claims that
Wikileaks sat on the info for
a whole year. Really? An
organization that wants to
spread news? Does the NYT sit
on a story for a year? You
release it. The timeline does
not make sense.
Schulte: Yes, I
am incarcerated. These fine
gentlemen here are Marshals.
You will see a lot of them. I
have been in jail five years -
you cannot know the pain.
Judge Furman:
Move on.
Schulte: Uh, ok.
I was suffering from strain
and anxiety.
Schulte: I wanted
to publish the Presumption of
Innocence. And it was, on
Facebook... Then, the CIA
reclassified things. Then they
accuse me of thought-crime.
Orwell's 1984 was prophetic.
My notebooks were labeled
Attorney Client Privilege.
Schulte:
The government cherry picks
the evidence to deceive you.
The info war was about my
unclassified redress of
grievances. President
Zelenskyy of Ukraine has
likewise engaged in an
information war to gain hearts
and minds
Schulte: I
ask the jury to realize how
serious this trial is. Treat
me as you'd like to be
treated. The government will
go first for everything. At
the end in summation they will
go first AND last. You will
find I am innocent. After 5
years, justice will be done.
The June 14, 2022
first witness, direct only, here
OK - now first
witness in US v. Joshua
Shulte: FBI Agent Richard
Evanchec.
AUSA: Where
do you work now? Evanchec: In
Dallas. North Texas. Before
that I was in counter
terrorism. And in NYC, counter
intelligence squad 6. We
thwarted foreign government's
spying
AUSA: What
was your role in investigating
Josh Schulte? Evanchec: I was
one of the lead agents.
AUSA: Do you see Mr. Schulte?
Evanchec: He is there, white
mask. He just waved. Wearing a
beard. With a shaved head.
AUSA: Let's talk about March
7, 2017.
Evanchec:
Wikileaks released Vault 7...
The impact was catastrophic.
Our enemies now knew our
capabilities. Operations
overseas were brought to a
complete halt. Innovation was
taken offline completely.
AUSA: Look
at the item on the ledge next
to you. Have you seen that
item? Evanchec: It's an HP
laptop with copy of the Vault
7 leak. Schulte: The defense
objects. Judge Furman:
Overruled. AUSA Michael
Lockard: What is here in
Exhibit 2?
Evanchec: This is
from the CIA documents leaked
in Vault 7. It says, "CIA
Hacking Tools Revealed." AUSA
Lockard: What is this?
Evanchec: This is the user
guide to Brutal Kangaroo, the
cyber tool.
Evanchec
(reading) "To infect thumb
drives... Brutal Kangaroo and
Drifting Deadline." A CIA
designed thumb drive that
could infect others. This
paragraph is classified as
secret.
Judge
Furman: What is the marking at
the top? Evanchec: SECRET is
the classification level. Then
Not For Foreign Dissemination-
even an ally. Judge Furman:
Jurors, some documents are
declassified for this trial.
There are other issues I'll
describe as they come up
AUSA Lockard:
What is this? Evanchec: The
chain of command Mr. Schulte
was under. AUSA Lockard: The
stolen information was from
the Center for Cyber
Intelligence? Evanchec:
Yes.
AUSA Lockard: Is
the location of CCI
undisclosed? Evanchec: Yes. It
is fortified. Evanchec: There
was a full body turnstile. You
had to enter a unique
identification PIN. AUSA
Lockard: Where was the
Development Branch? Evanchec:
On the 8th and 9th floor. AUSA
Lockard: How did you get in?
Evanchec: A unique card reader
and PIN for each Vault.
AUSA
Lockard: Let's turn to your
investigation. Evanchec: It
was a full investigation of
Joshua Schulte. With over 100
agents. 1.4 petabytes of
information. Unprecedented in
FBI history.
AUSA
Lockard (reading from a
stipulation) "If called as a
witness, a member of FBI CART
with knowledge of the matter
logged these hard drives into
evidence."
AUSA
Lockard: (reading from
stipulation) "GX 100 is a CD
with records of Joshua Adam
Schulte... Jeremy Weber...
Michael, GX 115... Amol,
116... and the floor plan of
the CCI... portions of the
defendant's CIA personnel
file. 401-405, NDAs, 409,
letter of warning
Judge Furman:
Ladies and gentlemen, sorry
for stealing three minutes of
your time. We'll pick up
tomorrow. You heard CIA
employees referred to by first
names only, or even other
names altogether. It's will my
permission. If you get COVID,
contact us.
Judge Furman:
Members of the public, please
hold a few minutes, to not run
into the jurors. Can we get a
preview of witnesses? AUSA:
Evanchec and cross will take
up much of tomorrow. [And when
the "sealed" witnesses? Watch
this feed]
Judge
Furman: Mr. Schulte, you'll be
taken to the SCIF (Sensitized
Classified Information
Facility), please give the
government your list. Also,
you crossed the line in
opening, essentially
testifying. I want to warn you
against it in your questioning
Judge
Furman: You need to ask
questions like a lawyer, not a
witness. Schulte: I
expect that documents will
support me. Judge Furman: It
was 1st hand testimonial. I'll
leave it there. I'm told one
of the jurors wants to speak
to me. I'll bring it up
tomorrow.
Here's from
Judge Furman June 13 Order:
"as discussed on the record at
the classified hearing
held on June 8, 2022,
the Court concludes that the
particular statement Defendant
seeks to admit is
admissible. The Court further
concludes that the information
should likely be admitted as
a stipulation, which
would give Defendant
“substantially the same
ability to make his defense
as would disclosure of ”
a portion of the document
itself, pursuant to CIPA
Section 6(c). See 18.
U.S.C. app. 3 § 6(c).
Accordingly, the parties shall
propose an agreed upon
stipulation or competing
stipulations for the Court’s
approval no later than June
17, 2022."
Previously, in
the conclusion of the month
long trial of accused CIA
leaker Joshua Schulte, on the
morning of March 9, 2020 the
jury returned guilty verdicts
on Counts 8 and 10, with
mistrial granted on all other
counts. U.S. District Court
for the Southern District of
New York Judge Paul A. Crotty
set March 26 for the next
date.
Then it was moved
to April 22 (then May 18).
March 9 thread here.
Song here.
On
November 9, 2021, a status
conference was held before
Judge Jesse M. Furman to whom
the case was reassigned. Inner
City Press live tweeted it here
- the upshot was a May 23,
2022 trial date was set. Vlog
here.
That has
since been moved to June, with
the admonition that it will
not be further moved. Schulte
has raised issues of how his
right to represent himself is
possible with law library,
turned off computers and
printer paper issues in the
MDC.
This was
was one of the issues at a May
18 pre-trial conference held
on Courtroom 15A of 500 Pearl
Street, where Judge Furman has
been overseeing a drug trial
Inner City Press is also
covering, along with other
criminal
and civil
trials.
It stepped out - then found
that a window had been opened
to oppose courtroom sealing.
It wrote in to Judge Furman,
see below and The New Yorker
of June 16: "Matthew Russell
Lee, an independent journalist
who covered the first trial,
recently filed an objection to
the government’s motion to
seal the courtroom during
testimony from C.I.A.
officers, but it appears that
that condition will again
apply."
On June 8 there
was a final pre-trial
conference, also in courtroom
15A; Inner City Press live
tweeted:
OK- at #CIA
#Vault7 leak case of US v.
Schulte, Inner City Press
which has opposed sealing is
here, with half dozen gov't
reps.
Now US wants to
quash subpoena on a witness.
Judge: I would
like to avoid sidebars... esp
due to Mr Schulte's US
Marshals issue. [He has 2
Marshals sitting behind him]
AUSA: When
we move to sealed witnesses...
Judge: We'll have the jury
leave too, to make no one is
in the courtroom who shouldn't
be. Openings at earliest
Tuesday [and probably later].
Four alternates.
Judge: 10
peremptories for the
defense. 6 for the US.
I'll tell jurors Mr Schulte is
charged with 9 crimes [incl
with] Wikileaks.
Schulte: Stress
that I am presumed innocent.
Judge: I
intend to ask jurors if they
are vaccinated and boosted.
AUSA: We want our
experts and former case agent
in the court during other
witnesses' testimony. Judge:
Experts yes, case agent no.
Judge: Witnesses
cannot read transcripts or
media. A/V dry run, you can do
it when in the courtroom, Mr
Schulte.
Schulte: I'll be
here til 4 on my Friday SCIF
day.
Judge:
We'll take up the rest in our
classified setting. Adjourned.
Then the
prosecutors and Marshals stood
around Schulte as he tried to
charge his laptop. The
continued session would be
elsewhere in the courthouse,
sealed.
Back on
April 13, 2022, Judge Furman
held a conference with Schulte
present. Inner City Press live
tweeted it here....
Previously, Judge
Crotty held another proceeding
with Schulte and his stand-by
counsel. Schulte was moved to
the MDC: "JOSHUA ADAM SCHULTE
Register Number: 79471-054
Age: 33
Race: White
Sex: Male
Located at: Brooklyn MDC
Release Date: UNKNOWN." [And
see its Oct 15 MCC video here]
On March
2, 2021 were the closing
arguments [in the first
trial], which Inner City Press
tweeted, thread here
More on
Patreon here.
See Inner City
Press filing into the docket
on Big Cases Bot, here.
Watch this site. The case is US
v. Schulte, 17-cr-548
(Furman).
***
Your
support means a lot. As little as $5 a month
helps keep us going and grants you access to
exclusive bonus material on our Patreon
page. Click
here to become a patron.
Feedback:
Editorial [at] innercitypress.com
SDNY Press Room 480, front cubicle
500 Pearl Street, NY NY 10007 USA
Mail: Box 20047, Dag
Hammarskjold Station NY NY 10017
Reporter's mobile (and weekends):
718-716-3540
Other, earlier Inner City Press are
listed here,
and some are available in the ProQuest
service, and now on Lexis-Nexis.
Copyright 2006-2020 Inner City
Press, Inc. To request reprint or other
permission, e-contact Editorial [at]
innercitypress.com for
|